No, testimonials about clinical care or outcomes cannot be used to advertise a regulated health service. Section 133 of the Health Practitioner Regulation National Law makes it an offence, and AHPRA and the National Boards enforce it across every platform a practice controls. There are still lawful ways to build trust, and the checklist further down shows exactly what they look like.
TL;DR:
- Testimonials mentioning symptoms, diagnoses, treatments, or outcomes are prohibited from advertising under Australian law, regardless of the platform.
- Reposting or editing reviews with clinical content on owned channels counts as advertising and poses legal risk, even if the original review is unsolicited.
- Disabling review functions and strictly moderating clinical-related comments help maintain compliance, while current content should focus on non-clinical trust signals.
- A regular audit process and clear staff policies are essential to prevent clinical testimonials from appearing in advertising channels.
- Violations can lead to formal enforcement actions, including removal requests or registration consequences, which make proactive compliance critical.
Table of Contents
- What does the law say about AHPRA testimonials in advertising?
- What makes a review a prohibited testimonial?
- Who’s responsible when a testimonial appears on social media or a review site?
- Which testimonials are safe and which cross the line?
- Why editing or republishing a review can create legal risk
- What should a clinic’s compliance checklist look like?
- What happens if AHPRA acts on a testimonial complaint?
- Lawful storytelling: how we help clinics build trust without clinical testimonials
- Compliant photography and video for AHPRA advertising rules
- Sources
What does the law say about AHPRA testimonials in advertising?
Section 133(1)© of the National Law prohibits advertising a regulated health service using testimonials or purported testimonials. “Advertising” is read broadly here. It covers anything promoted to attract patients, from a paid social post to a static line on a clinic’s homepage, not just traditional ads.
AHPRA and the National Boards, the joint regulatory bodies for Australia’s registered health professions, updated the advertising guidelines in December 2020 to sharpen this rule and give practitioners a clearer test to apply. The guidelines explain the reasoning too: testimonials are anecdotal, they can create unreasonable expectations of a treatment’s success, and they risk encouraging people to seek care they don’t actually need. AHPRA’s own framing matters here, the intent isn’t to silence patients talking about their experiences. It’s to stop advertisers weaponising those experiences to sway clinical decisions.
What makes a review a prohibited testimonial?
A testimonial, in the National Law’s sense, is any recommendation or positive statement about the clinical aspects of a health service. AHPRA identifies three markers that trigger this test, and if a comment hits any one of them, it’s off limits for advertising:
- Symptom: mentions of pain, illness, or a condition the patient had
- Diagnosis or treatment: naming the specific procedure, medication, or clinical process used
- Outcome or skills: claims about how well it worked, or how skilled the practitioner was clinically
“Dr Lee fixed my chronic back pain in three sessions” fails on all three counts. “The staff were friendly and got me in on short notice” passes, because it says nothing about symptoms, treatment, or clinical results. That distinction, symptom versus service, is the whole test in practice.
Who’s responsible when a testimonial appears on social media or a review site?
Responsibility comes down to control, not visibility. Unsolicited reviews sitting on a platform the practice doesn’t own or administer, think Google Business Profile or a third-party directory, don’t automatically need to be removed, and AHPRA has confirmed practitioners aren’t required to police them. The moment a clinic reposts, screenshots, or pins that same review to its own Instagram feed or website, it becomes the clinic’s advertising, and the prohibition applies in full.
A few practical notes worth building into your workflow:
- Disable the reviews or recommendations function on Facebook pages you administer, since a visible clinical review there counts as your advertising.
- Linking out to a third-party review page is generally lower risk than copying the content onto an owned page.
- Admin access is the trigger. If your team can edit, moderate, or feature a comment, you’re treated as controlling it.
Which testimonials are safe and which cross the line?
Some comparisons make the clinical-aspects test click faster than any definition. Here are six paired examples, prohibited on the left, compliant on the right:
- “My anxiety completely disappeared after six sessions” (outcome claim) versus “The psychologist made me feel comfortable from the first appointment” (service comment).
- “This physio cured my rotator cuff injury” (diagnosis and outcome) versus “Booking online was quick and the clinic was easy to find” (accessibility comment).
- “Best dentist for root canals, no pain at all” (treatment and outcome) versus “Reception staff explained the billing clearly” (administrative comment).
- “She diagnosed what three other doctors missed” (diagnosis claim) versus “Appointments always run on time” (service comment).
- A five-star review with the clinical detail stripped out by the clinic before reposting versus republishing the same review in full, unedited, with a policy of never sharing reviews that mention symptoms or treatment.
- A fabricated “patient” quote written by a marketing agency (a purported testimonial, banned even though no real patient exists) versus a genuine staff quote about workplace culture.
Comments about parking, wait times, front-desk manner, or clinic accessibility are generally safe territory, because they stay entirely outside the clinical-aspects test.
Why editing or republishing a review can create legal risk
Cropping a five-star review to hide the clinical line, or lightly rewording it to “soften” a treatment claim, doesn’t fix the problem. AHPRA’s guidance is explicit that editing reviews to try to make them compliant can itself be misleading or deceptive conduct, because it presents a curated version of someone’s experience as genuine and unedited.
The safest moderation rule is blunt: publish only complete, unedited reviews, and only if they contain zero clinical aspects. If a review mentions a symptom, treatment, or outcome anywhere in it, the answer is to leave it off your owned channels entirely, not trim it down.
What should a clinic’s compliance checklist look like?
Turning AHPRA’s guidance into daily practice takes three layers: an audit, technical fixes, and staff policy.
Audit first. Search Google, Facebook, Instagram, and any directory listing for your clinic name and each practitioner’s name quarterly. Log anything mentioning a symptom, diagnosis, treatment, or clinical outcome, and note where it’s published and who controls that page.
Fix the technical side. Disable review or recommendation functions on Facebook pages and any owned platform where you can. Strip republished testimonials with clinical content from your website and social feeds immediately. Add a written moderation policy that states, in plain terms, what staff can and can’t post or approve, and document patient consent wherever real names or images are used.
Brief your people. Front-desk and social media staff need a scripted response for when a patient tries to leave a clinical comment on a public page, something like thanking them and redirecting detailed feedback to a private channel. Set an internal escalation path too, so if AHPRA makes contact, one person owns the response rather than three people scrambling.
Build trust without testimonials. Credentials, non-clinical process descriptions, staff profiles, and genuine patient-experience content (focused on comfort, accessibility, and administrative ease rather than results) all do the job legally. Our guide to AHPRA advertising guidelines for photos and video breaks down how visual content fits this test, and the clinic service page checklist is worth running against your own site.
Pro Tip: Before any staff member shares a glowing comment on social media, ask one question: does it mention a symptom, a treatment, or a result? If yes, it stays off owned channels, no matter how good it sounds.
What happens if AHPRA acts on a testimonial complaint?
AHPRA’s enforcement typically starts light and escalates. A first step is usually a request to amend or remove the advertising. If that’s ignored, or the breach is serious, it can move to a formal inquiry and potential referral to the relevant National Board, which can affect a practitioner’s registration in serious or repeated cases.
If you’re contacted, act fast: preserve the original content and any correspondence, take the advertisement down or amend it immediately, and get advice before responding formally. Practitioners who engage with the AHPRA testimonial guidelines proactively, rather than reactively, tend to resolve complaints far faster.
Lawful storytelling: how we help clinics build trust without clinical testimonials
The clinics we work with don’t need testimonials to look credible. Staff photography, behind-the-scenes process videos, and honest administrative-experience statements (how easy it was to book, how the space feels, how the team explains things) all build trust without touching a symptom, diagnosis, or outcome claim. That’s the brief we script to on every shoot for NDIS providers, allied health clinics, and aged care operators. If your current content leans on testimonials, it’s worth a compliance-aware review before your next campaign goes live.
— Mishal
Compliant photography and video for AHPRA advertising rules
An alternative to chasing risky testimonial content for clinics and NDIS providers is to get footage built from the ground up to stay clear of section 133 altogether.
We produce staff portraits, process films, and non-clinical patient-experience video, all scripted and shot with AHPRA’s clinical-aspects test in mind from the first storyboard, not fixed in the edit afterwards. That matters because, as the checklist above shows, editing your way to compliance rarely works. Consent forms, moderation notes, and script sign-off happen before the camera rolls, which is the only point at which those decisions are cheap to get right.
If you’re an NDIS provider working through content decisions alongside a participant’s plan, it’s also worth checking how to make the most of an NDIS budget before committing to a content spend.
See how compliant photography works in practice on our clinic photography guide, or get in touch for a content plan built around your service, not a testimonial you can’t legally use.
This article is general information, not a substitute for advice from a qualified doctor. Consult a qualified healthcare professional about your own circumstances before acting on anything here.